In the Claims : 

1. (Currently amended) An asymmetrical key cryptography method involving a 
keyholder having a number m>l of private keys Q x ,Q 2 , -,Q m and respective public keys 
G„G 2 ,...,G m , each pair of keys (£J,G,) (where i = l,...,m) satisfying either the relationship 
G, = Q* mod n or the relationship G, xg v =l mod n , where n is a public integer equal to the 
product of / (where / > 1 ) private prime factors p x ,...,p f , at least two of which are separate, 

and the exponent v is a public integer equal to a power of 2, wherein the method comprises the 
stepsof: which method is charact e rized in that 

arranging exponent v to have the relationship v = 2 b+k , 
where A; is a strictly positive integer and b = max(6„. -,&/), where bj (where j = 1,...,/) is the 
highest integer such that {p j -l)/2* y_1 is even; [[,]] and 

arranging each public key G,. (where / = l,...,m ) is-ef to have the form G, = g, 2 °' mod n , 
where the base numbers g i are integers strictly greater than 1 and the numbers a, are integers 
such that 1 < a t < b and at least one of them is strictly greater than 1 . 

2. (Currently amended) A method according to claim 1, charact e riz e d in that 
wherein at least one of said prime factors p x ,...,p f is congruent to 1 modulo 4 and the integers 
a, (where i = \,...,m ) are all equal to said number b . 
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3. (Currently amended) A method according to claim 1 or claim 2, characterized in 
that , wherein said base numbers g l9 ... 9 g m include at least one number g.and said prime factors 
p x ,...,p f include at least two numbers p t and p u other than 2 such that, given said numbers 

if b t = b u , then (g s \ p t ) = - (g s \ Pu ) , and 
if&,<6 w ,then (g s \ Pu ) = -U 
where (g s \ p t ) and (g s \ p u ) denote the Legendre symbols of g s relative to p t and /? w . 

4. (Currently amended) A method according to claim K wherein any one of the 
preceding claims, characterized in that the base numbers g v ...,g m are prime numbers. 

5. (Currently amended) A method according to claim 1 any one of claims 1 to 4, 
involving a controller and said keyholder, here called the claimant, characterized in that it 
wherein the method comprises the following steps: 

the claimant chooses at random an integer r , calculates the witness R = r y mod n and 
sends the witness to the controller, 

the controller chooses at random m challenges d v d 2 ,...,d m where i = l,...,m and sends 
the challenges to the claimant, 

the claimant calculates the response 

D = rxQ x d >xQ 2 d >x...xQj»modn, 
and sends the response to the controller, and 



-4- 



the controller calculates 

D v x G' ,d ' x G/ 2 " 2 x...x G m e " d - mod n 

where, for / = \,...,m ,e,=+l if G, x Q* = 1 mod n and = -1 if G, = 0/ mod n , 
and verifies that the result is equal to the witness R . 

6. (Currently amended) A method according to claim 1 any one of claims 1 to 1 , 
enabling a controller to verify that a message M that it has received was sent to it by said 
keyholder, here called the claimant, characterized in that it wherein the method comprises the 
following steps: 

the claimant chooses at random an integer r and first calculates the witness 
R = r v mod n , then calculates the token T = h(M, R) , where h is a hashing function, and finally 
sends the token T to the controller, 

the controller chooses at random m challenges d v d 2 ,...,d m where i = l,...,m, and sends 
the challenges to the claimant, 

the claimant calculates the response 
D = r x Q x d> x Q 2 dl x ... x Q m d " mod n and sends the response to the controller, and 

the controller calculates h(M , D v x G*' d ' xG/ 2 ' 2 x...xG m £ " ,d " mod«) where, for 

i = \,...,m, £, =+1 if G ; x Q" = 1 mod n and f, =-l if G,=g"modn, and verifies that the 
result is equal to the token T . 
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7. (Currently amended) A method according to claim 5 , wherein or claim 6, 
characterized in that the challenges satisfy the condition 0 < d i < 2* -1 for i = . 

8. (Currently amended) A method according to claim 1 any on e of claims 1 to 4 , 
enabling said keyholder, here called the signatory, to sign a message M that it sends to a 
controller, charact e rized in that it wherein the method comprises the following steps: 

the signatory chooses at random m integers r t , where / = l,...,iw , and first calculates the 
witnesses tf = r v mod n, then calculates the token T = h(M,R l9 R 2 ,... 9 R m ), where h is a hashing 
function producing a word of m bits, and finally sends the token T to the controller, 

the signatory identifies the bits d { ,d 2 ,...,d m of the token T 9 

the signatory calculates the responses D i = r, x Qf { mod n and sends the responses to the 
controller, and 

the controller calculates 
h(M,D x v x G x eA mod D 2 V x G/ 2 * 2 mod n,... 9 D m v x G m e » d » mod n) 

where, for / = l,...,m , e, = +1 if G l x Qj = 1 mod n and e i = ~1 if G l = Qj mod n , and verifies 
that the result is equal to the token T . 

9. (Currently amended) An electronic circuit including a processor and memories, 
charact e riz e d in that it wherein the electronic circuit can be programmed to act as said keyholder 
in executing a method according to claim 1 any on e of claims 1 to 8 . 
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10. (Currently amended) A dedicated electronic circuit, characterized in that it 
includes including microcomponents enabling k the electronic circuit to process data in such 
manner as to act as said keyholder in executing a method according to claim 1 any one of claims 
J-te-S. 

11. (Currently amended) A portable object adapted to be connected to a terminal to 
exchange data with that terminal, characterized in that it wherein the portable object includes an 
electronic circuit according to claim 9 or claim 10 and is adapted to store identification data and 
private keys specific to said key holder. 

12. (Currently amended) A terminal adapted to be connected to a portable object to 
exchange data with that portable object, characterized in that it wherein the terminal includes a 
data processing device programmed to act as said controller in executing a method according to 
claim_l any one of claims 1 to 8 . 

13. (Currently amended) A cryptography system comprising! 

a portable object according to claim 1 1 adapted to be connected to a terminal to exchange 
data with that termi nal, wherein the portable object includes an electronic circuit having a 
processor and memori es, wherein the electronic circuit can be programmed to act as said 
keyholder in executing a method according to claim 1. and wherein the portable object is adapted 
to store identification data and private kevs specific to said key holder; and 
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a terminal according to claim 12 adapted to be connected to the portable object to 
exchange data with that portable object, wherein the terminal includes a data processing device 
programmed to act as said controller in executing a method according to claim 1 . 

14. (Currently amended) Non-removable data storage means containing electronic 
data processing program code instructions for, as said keyholder, executing the steps of any of 
the methods of a method according to claim 1 any on e of claims 1 to 8 . 

15. (Currently amended) Partially or totally removable storage means containing 
electronic data processing program code instructions for, as said keyholder, executing the steps 
of a method according to claim 1 any on e of claims 1 to 8 . 

16. (Currently amended) A data processing device comprising storage means 
according to claim 14 or claim 15 . 

17. (Currently amended) Non-removable data storage means containing electronic 
data processing program code instructions for, as said controller, executing the steps of any of 
the methods of a method according to claim 1 any on e of claims 1 to 8. 

18. (Currently amended) Partially or totally removable data storage means 
containing electronic data processing program code instructions for, as said controller, executing 
the steps of a method according to claim 1 any one of claims 1 to 8 . 
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19. (Currently amended) A data processing device, characteriz e d in that wherein it 
comprises storage means according to claim 17 or claim 1 8. 



20. (Currently amended) A cryptography system comprising! 

a data processing device according to claim 16 including non-removable storage means 
containing electronic d ata processing program code instructions for, as said kevholder. executing 
the steps of any of the methods of a method according to claim 1 : and 

a data processing device according to claim 19 including non-removable data storage 
means containing elec tronic data processing program code instructions for, as said controller, 
executing the steps of any of the methods of a method according to claim 1 . 

21. (Currently amended) A computer program containing instructions such that, when 
said program controls a programmable data processing device, said instructions cause said data 
processing device to execute a method according to claim 1 any one of claims 1 to 8 . 

22. (New) A method according to claim 4, wherein the base numbers g {9 ... 9 g m are 
chosen from the first 54 prime numbers. 
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